
Rules and ethics
Part of Out of home advertising rules: budget for consent risk
Out of home advertising rules for England campaigns: CAP Code, planning and data protection
The CAP Code, England planning consent and UK data protection rules all touch out of home advertising. See which rule governs each campaign decision.
What to take away
- The CAP Code, listed by the ASA as the 12th edition, covers posters and digital out of home.
- In England, planning consent for a display is a separate question from whether the content meets the code.
- Digital screens that use audience data bring UK GDPR and electronic marketing rules into scope.
- The contract, not the code, usually decides who pays when a site is refused.
- For a route through the paperwork, see the out of home advertising rules and compliance guide.
Which rules apply to out of home advertising in England
The CAP Code is the self-regulatory standard the Advertising Standards Authority applies to non-broadcast ads. The ASA lists it with the broadcast codes on its advertising codes page.
The code applies across the UK, so a poster in Leeds and a poster in Cardiff are judged by one standard. A bus shelter panel booked through a media owner sits in the same frame.
It covers misleading claims (clause 3.1), harm and offence (clause 4.1), plus sector rules for alcohol (section 16) and gambling (section 15). A roadside poster in England is judged against the same code as a newspaper ad.
The code is not law, so the ASA cannot fine an advertiser. It can require a campaign to be withdrawn or amended, and it publishes rulings that name the advertiser. The ASA typically publishes rulings weekly, usually on a Wednesday.
Buyers should hold the evidence behind any claim, because the ASA asks advertisers to prove what they assert.
Where planning consent fits in
Advertising display in England is controlled by the Town and Country Planning (Control of Advertisements) (England) Regulations 2007. Some displays benefit from deemed consent, while others need express consent from the local planning authority.
Planning consent route for a display
Does the display benefit from deemed consent?
Check size, height, illumination and local character
Apply for express consent from the local planning authority
Schedule 3 to the 2007 regulations sets out the deemed consent classes. Class 2 covers miscellaneous ads up to 0.6 sq m, not illuminated. Class 3 covers temporary ads up to 0.6 sq m, not illuminated, for no more than three months.
Class 4 covers business premises ads up to 1.2 sq m, not illuminated. Class 6 covers construction hoardings up to 2.3 sq m, not illuminated. Larger or illuminated displays need express consent.
Deemed consent is not a blank cheque. Size, height, illumination and local character all shape what a site can carry, and a council can serve a discontinuance notice.
A refused application in England can be appealed to the Planning Inspectorate, which adds weeks to a launch date. The appeal must normally be submitted within six months of the decision notice. A council discontinuance notice can be appealed within six weeks of the notice date.
This is general guidance only, and a particular site or campaign needs a qualified planning or legal adviser.
Audience data and lawful targeting
Digital formats can target by time, location or audience profile. Where personal data is used, UK GDPR applies, and electronic marketing rules may bite as well.
Is this data personal?
Aggregated footfall counts
- Personal data?
- Normally not
- Lawful basis
- Not required
- Retention
- No limit set
- Accountability
- No record needed
Device-level matching
- Personal data?
- Usually yes
- Lawful basis
- Documented basis needed
- Retention
- Set a retention limit
- Accountability
- Record purpose and basis
The ICO's direct marketing guidance explains consent, legitimate interests and the soft opt-in. It is aimed at direct marketing, but the same reasoning applies when a place-based campaign uses personal data to decide who sees which creative.
The relevant UK GDPR provisions are Article 6(1)(a) for consent and Article 6(1)(f) for legitimate interests, with Article 5(1)(a) on lawfulness, fairness and transparency. PECR regulation 6 covers device storage or access, and PECR regulation 22 covers electronic mail. The ICO's guidance on legitimate interests and its guidance on cookies and similar technologies set out the tests.
Aggregated footfall counts are normally not personal data. Device-level matching usually is, and it needs a documented lawful basis.
An accountability record setting out purpose, lawful basis and retention is the evidence that the processing was planned rather than inherited.
Screen standards and annoyance risk
Digital out of home rotates creative quickly, so intrusive formats attract complaints faster. The Coalition for Better Ads status page from IAB UK tracks where that initiative stands. Rotation speed, sound and animation are common triggers. Under CAP Code clause 4.1 on harm and offence, repeated complaints can lead to a ruling.
Matching the rule to the decision
Two questions settle most out of home disputes. Is the site allowed to carry the structure, and is the copy allowed to run?
Clearance before you book
- Confirm site permission from planning system and landowner
- Clear copy against the CAP Code
- Use ASA copy advice for an early view
- Do not rely on the media owner's checklist
- Check who is named in a ruling
Site permission and copy clearance
Site permission comes from the planning system and the landowner. Copy clearance comes from the CAP Code, and the ASA offers copy advice for advertisers who want an early view of a specific execution.
A media owner's checklist is not a substitute for the advertiser's own clearance, because the advertiser is usually the party named in a ruling.
Contracts and exit routes
The contract decides who pays when a site is refused or a screen goes dark. Payment terms, termination rights and liability caps matter more than the rate card. The out of home advertising commercial contracts article covers the clauses worth negotiating before signature.
Decision table
Choose
- Site with no confirmed consent
- Written confirmation from landowner and council
- Digital screen using device data
- A lawful basis and a retention limit
- Device-level targeting
- A documented lawful basis held by the party that decides purpose and means
- Alcohol, gambling or health copy
- An early check against CAP Code sector rules
- Site refused or campaign pulled
- Termination and liability clauses in writing
Avoid
- Site with no confirmed consent
- Booking on a verbal assurance
- Digital screen using device data
- Keeping raw device identifiers
- Device-level targeting
- Assuming the media owner holds it by default
- Alcohol, gambling or health copy
- Assuming the media owner has cleared it
- Site refused or campaign pulled
- Relying on goodwill
Common questions
Does the CAP Code apply to billboards in England?
Yes. The CAP Code covers non-broadcast advertising, and posters and digital screens fall within it. The ASA can require changes and publishes rulings.
Do I need planning permission for every poster site?
No. Some displays have deemed consent under the England regulations from 2007. Others need express consent, so check the specific site before booking.
Who is responsible if a screen uses audience data unlawfully?
Responsibility normally sits with whoever decides the purpose and means of the processing. That is often the advertiser or the media owner, depending on the deal.



